Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:smartcloud_analytics_log_analysis:1.3.8.2:*:*:*:*:*:*:*

part: a version: 1.3.8.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSmartcloud Analytics Log Analysis (e345f9ac-602e-5a23-8206-8d99a8710b26)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-41751 vulnerable 2026-06-08 06:43:55.098894 IBM SmartCloud Analytics - Log Analysis security bypass
MEDIUM (5.5)
IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local, authenticated attacker to bypass client-side enforcement of security to manipulate data.
Published: 2025-07-23T11:09:44.485Z
Updated: 2025-08-18T01:29:44.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41750 vulnerable 2026-06-08 06:43:55.098367 IBM SmartCloud Analytics - Log Analysis security bypass
MEDIUM (5.5)
IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local, authenticated attacker to bypass client-side enforcement of security to manipulate data.
Published: 2025-07-23T11:15:12.334Z
Updated: 2025-08-18T01:29:21.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40686 vulnerable 2026-06-08 06:43:52.994560 IBM SmartCloud Analytics - Log Analysis HOST header injection
MEDIUM (5.4)
IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.
Published: 2025-07-23T11:12:23.857Z
Updated: 2025-08-18T01:28:44.168Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40682 vulnerable 2026-06-08 06:43:52.980824 IBM SmartCloud Analytics - Log Analysis denial of service
MEDIUM (6.2)
IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local user to cause a denial of service due to improper validation of specified type of input.
Published: 2025-07-23T11:14:18.732Z
Updated: 2025-08-18T13:27:52.071Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.